dependabot[bot] opened a new pull request, #1908: URL: https://github.com/apache/cxf/pull/1908
Bumps [net.sourceforge.pmd:pmd-java](https://github.com/pmd/pmd) from 6.55.0 to 7.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pmd/pmd/releases";>net.sourceforge.pmd:pmd-java's releases</a>.</em></p> <blockquote> <h2>PMD 7.2.0 (31-May-2024)</h2> <h2>31-May-2024 - 7.2.0</h2> <p>The PMD team is pleased to announce PMD 7.2.0.</p> <p>This is a minor release.</p> <h3>Table Of Contents</h3> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#new-and-noteworthy";>🚀 New and noteworthy</a> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#collections-exposed-as-xpath-attributes";>Collections exposed as XPath attributes</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#updated-pmd-designer";>Updated PMD Designer</a></li> </ul> </li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#fixed-issues";>🐛 Fixed Issues</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#api-changes";>🚨 API Changes</a> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#deprecated-api";>Deprecated API</a></li> </ul> </li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#external-contributions";>✨ External Contributions</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#stats";>📈 Stats</a></li> </ul> <h3>🚀 New and noteworthy</h3> <h4>Collections exposed as XPath attributes</h4> <p>Up to now, all AST node getters would be exposed to XPath, as long as the return type was a primitive (boxed or unboxed), String or Enum. That meant that collections, even of these basic types, were not exposed, so for instance accessing Apex's <code>ASTUserClass.getInterfaceNames()</code> to list the interfaces implemented by a class was impossible from XPath, and would require writing a Java rule to check it.</p> <p>Since this release, PMD will also expose any getter returning a collection of any supported type as a sequence through an XPath attribute. They would require to use apropriate XQuery functions to manipulate the sequence. So for instance, to detect any given <code>ASTUserClass</code> in Apex that implements <code>Queueable</code>, it is now possible to write:</p> <pre lang="xml"><code>/UserClass[@InterfaceNames = 'Queueable'] </code></pre> <h4>Updated PMD Designer</h4> <p>This PMD release ships a new version of the pmd-designer. For the changes, see <a href="https://github.com/pmd/pmd-designer/releases/tag/7.2.0";>PMD Designer Changelog (7.2.0)</a>.</p> <h3>🐛 Fixed Issues</h3> <ul> <li>core <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/4467";>#4467</a>: [core] Expose collections from getters as XPath sequence attributes</li> <li><a href="https://redirect.github.com/pmd/pmd/issues/4978";>#4978</a>: [core] Referenced Rulesets do not emit details on validation errors</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/4983";>#4983</a>: [cpd] Fix CPD crashes about unicode escapes</li> <li><a href="https://redirect.github.com/pmd/pmd/issues/5009";>#5009</a>: [core] Kotest tests aren't picked up by surefire</li> </ul> </li> <li>java <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/4912";>#4912</a>: [java] Unable to parse some Java9+ resource references</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/4973";>#4973</a>: [java] Stop parsing Java for CPD</li> <li><a href="https://redirect.github.com/pmd/pmd/issues/4980";>#4980</a>: [java] Bad intersection, unrelated class types java.lang.Object[] and java.lang.Number</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/4988";>#4988</a>: [java] Fix impl of ASTVariableId::isResourceDeclaration / VariableId/@<!-- raw HTML omitted -->ResourceDeclaration</li> <li><a href="https://redirect.github.com/pmd/pmd/issues/4990";>#4990</a>: [java] Add an attribute @<!-- raw HTML omitted -->PackageQualifier to ASTClassType</li> <li><a href="https://redirect.github.com/pmd/pmd/issues/5006";>#5006</a>: [java] Bad intersection, unrelated class types Child and Parent<!-- raw HTML omitted --></li> <li><a href="https://redirect.github.com/pmd/pmd/issues/5029";>#5029</a>: [java] PMD 7.x throws stack overflow in TypeOps$ProjectionVisitor while parsing a Java class</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pmd/pmd/commit/38bc997d4e7f4b29cee86829915f17f925211800";><code>38bc997</code></a> [release] prepare release pmd_releases/7.2.0</li> <li><a href="https://github.com/pmd/pmd/commit/27a14cc61e4659447125422756e545fe2a7b96f0";><code>27a14cc</code></a> Prepare pmd release 7.2.0</li> <li><a href="https://github.com/pmd/pmd/commit/e27b30e0b52229f66c5dae8aab0c2b95d877a135";><code>e27b30e</code></a> Bump pmd-designer from 7.2.0-SNAPSHOT to 7.2.0</li> <li><a href="https://github.com/pmd/pmd/commit/d37769e71c64b9c8ffdea521bade7a17b0da39a8";><code>d37769e</code></a> Bump builds-tools from 25-SNAPSHOT to 25</li> <li><a href="https://github.com/pmd/pmd/commit/2a0cba7b9155505a2a065339cf439dcd8e986692";><code>2a0cba7</code></a> [java] Improve LocalVariableCouldBeFinal (<a href="https://redirect.github.com/pmd/pmd/issues/5003";>#5003</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/8a8402a0bd255c46375d452092643ef31bde7ba2";><code>8a8402a</code></a> [doc] Update release notes (<a href="https://redirect.github.com/pmd/pmd/issues/1619";>#1619</a>, <a href="https://redirect.github.com/pmd/pmd/issues/3122";>#3122</a>, <a href="https://redirect.github.com/pmd/pmd/issues/5003";>#5003</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/3890b561a13191af49a71d19aab81ba11e6b5129";><code>3890b56</code></a> [java] Remove FPs in UnnecessaryBoxing (<a href="https://redirect.github.com/pmd/pmd/issues/5019";>#5019</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/224f5b83039b646c1dd5f29b9453346006425159";><code>224f5b8</code></a> [doc] Update release notes (<a href="https://redirect.github.com/pmd/pmd/issues/4903";>#4903</a>, <a href="https://redirect.github.com/pmd/pmd/issues/4924";>#4924</a>, <a href="https://redirect.github.com/pmd/pmd/issues/5019";>#5019</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/910c0985ca952c3ef68c372d06f67661c31d7a97";><code>910c098</code></a> [core] Fix Kotest based tests (<a href="https://redirect.github.com/pmd/pmd/issues/5022";>#5022</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/37451931dc0b290c7de44691bea2b175f6d34612";><code>3745193</code></a> [test] Add missing junit jupiter engine</li> <li>Additional commits viewable in <a href="https://github.com/pmd/pmd/compare/pmd_releases/6.55.0...pmd_releases/7.2.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@cxf.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
